erman taŞkin . erman taŞkin İş sürekliliği yönetim süreci ve karar verme metodolojisi
TRANSCRIPT
![Page 1: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/1.jpg)
ERMAN TAŞKIN
www.ermantaskin.com/bcm
![Page 2: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/2.jpg)
ERMAN TAŞKIN
İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi
![Page 3: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/3.jpg)
BC Decision Making Methodology
AGENDA
1.BCM Organization Understanding2.BCM Impact Analysis Process3.BCM Strategy4.BCM Implementation Methodology
Documentation
www.ermantaskin.com/bcm
![Page 4: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/4.jpg)
ITIL(ITSCM) & BS25999
![Page 5: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/5.jpg)
BCM Program Management
Based on BS2599
![Page 6: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/6.jpg)
BCM Documentation
![Page 7: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/7.jpg)
Understanding the organization
![Page 8: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/8.jpg)
BCM Decision Making
![Page 9: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/9.jpg)
BCM Decision Making
Assess cirtical services impactsEstablish maximum tolerable period of disruptionIdenfity any inter-dependent activitiesService Catalog investigation CMDB usage for relationships definition
Business Impact
Analysis
Identification of critical activities
Determining Continuity
Requirements
Risk assessment
Determining choices
![Page 10: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/10.jpg)
BCM Decision Making
Assess operational processesDetermine financial values of services and
activitiesConsider SLA targetsUse Availability PlanUse Availability Reports
Business Impact Analysis
Identification of critical activities
Determining Continuity
Requirements
Risk assessment
Determining choices
![Page 11: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/11.jpg)
BCM Decision Making
Staff resourcesWork siteSupporting technologyProvison of informationExternal services and suppliers
Business Impact Analysis
Identification of critical activities
Determining Continuity
Requirements
Risk assessment
Determining choices
![Page 12: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/12.jpg)
BCM Decision Making
Level of risk should be understood specifically
Choosing risk assessment approachElements that risk assessment process
includeDetermination of criteria for risk acceptanceIdentification of acceptable levels of riskAnalysis of the risks
Business Impact Analysis
Identification of critical activities
Determining Continuity
Requirements
Risk assessment
Determining choices
![Page 13: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/13.jpg)
BCM Decision Making
Do nothingManual Work-aroundsReciprocal arrangementsGradual Recovery (cold stand by)Intermediate Recovery (warm stand by)Immediate Recovery (hot stand by)
Business Impact Analysis
Identification of critical activities
Determining Continuity
Requirements
Risk assessment
Determining choices
![Page 14: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/14.jpg)
Business Impact Analysis Process
![Page 15: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/15.jpg)
Set up an impact analysis project
Identify a project coordinator to carry out the business impact analysis.
Define the objectives and scope of the business impact analysis project.
Choose an appropriate methodology or tool for carrying out BIA. Create a work schedule and project plan. Launch the business impact analysis project.
![Page 16: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/16.jpg)
Evaluate the effects of disruption and the impacts on operations
Effects of disruption Loss of assets
Key personnel Physical assets Information assets Market share
Disruption to the continuity of services and operations Violation of a law or regulation Negative public perception
![Page 17: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/17.jpg)
Effects of disruption on the company’s operations Financial Clients and suppliers Public relations Legal Regulatory considerations and requirements Environmental Operational Delays Credibility Other resources
Evaluate the effects of disruption and the impacts on operations
![Page 18: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/18.jpg)
Determine loss exposure
QuantitativeRevenue lossFinancial penaltiesGross cash flow Accounts payableLegal liabilitiesHuman resourcesAdditional expensesHigher cost of work
QualitativeHuman resourcesMoraleConfidenceLegalSocial and corporate imageFinancial credibility
Evaluate the effects of disruption and the impacts on operations
![Page 19: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/19.jpg)
Business impact analysis - data collection
Gathering data using a questionnaire
Understand the importance of the questionnaire’s conception and distribution.
Clearly explain the rationale for the questionnaire. Offer support to personnel while they complete the
questionnaire. Review completed questionnaires. Conduct follow-up discussions to obtain clarifications
![Page 20: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/20.jpg)
Business impact analysis - data collection
Gathering data through interviews
Explain the purpose of the interview. Clearly establish the type of information that is being looked for. Compile a list of elements to cover during the interview Consult the list throughout the meeting to ensure none are omitted. Plan follow-up interviews
![Page 21: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/21.jpg)
Gathering data through workshops
Set up a workshop schedule Compile a list of objectives to be met. Identify the appropriate level of participation from managers Identify an appropriate evaluation area, Identify the equipment needed and personnel availability. Interact with personnel during the workshops and discussions. Ensure that workshop objectives are met. Ensure that all possible impacts raised during workshops are written
down.
Business impact analysis - data collection
![Page 22: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/22.jpg)
Decide upon data analysis methods (manually or using a computer). Assess the potential financial and non-financial impacts of the risks
compiled. Prepare business impact analysis report
Prepare drafts of the business impact analysis report, including the list of impacts.
Provide participating managers with a draft report and ask for their comments. Review the managers’ feedback Plan a meeting with participating managers to discuss the initial findings. Prepare and make formal presentations to colleagues and executives regarding
the findings
Business impact analysis - data collection
![Page 23: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/23.jpg)
Define business functions and critical data
Establish a definition of what is “critical” for the organization With management, identify one or more critical levels.
financial (loss of revenue, cost of recovery) recovery time. With these two criteria, it is possible to classify
impacts as: critical & major & minor.
Identify vital data for ensuring BC and the recovery of the organization’s operations. Identify support teams. Identify interdependencies
Prioritize critical elements for the organization in the impact mitigation process.
![Page 24: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/24.jpg)
Determine the time and resources necessary for recovery
Define recovery processes for critical business functions based on criticality criteria Determine the order of recovery for critical business functions Determine the minimum resource requirements for recovery
Internal and external resources. Resources owned or not Existing and accessible resources.
Evaluate the maximum period of time Evaluate the maximum period of time during which information can remain
unavailable. Evaluate how long information can be allowed to “age” without being updated. Evaluate the amount of information that can be lost without causing major
prejudice to the organization. Evaluate the limit beyond which the company’s operations will sustain major
prejudice due to the disruption.
![Page 25: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/25.jpg)
Identify business processes
Interrelation between business processes Processes dependencies
InternalExternal
In terms of technology
![Page 26: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/26.jpg)
Determine replacement times
EquipmentSostwaresDataKey personnelRaw material
![Page 27: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/27.jpg)
Determining BC StrategyPeopleLocationsTechnologyInformationSuppliesStakeholdersCivil emergencies
![Page 28: ERMAN TAŞKIN . ERMAN TAŞKIN İş Sürekliliği Yönetim Süreci ve Karar Verme Metodolojisi](https://reader038.vdocuments.mx/reader038/viewer/2022102818/56649f1d5503460f94c342eb/html5/thumbnails/28.jpg)
BCM Implementation Methodology
BCM implementation documentation
www.ermantaskin.com/bcm